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tun 


Ext 
Dat 






CORPLEGAL 


List of (Sub) processors, recipients in third countries 


and international organizations 


This document lists all of the (sub) processors we use, as well as the recipients in third 


countries and international organizations to which we transfer personal data. It is intended 


to (1) enable our business partners to identify processors and recipients in third countries 


and international organizations that we use or have approved, and (2) enable data 


subjects to know and enforce the rights to which they are entitled. For the sake of 


transparency, we point out that the companies we named may process personal data at 


third parties (e.g. external hosting of websites or SaaS applications). Information on data 


processing by these companies can be found on the respective website that we indicated. 








. Company name: 

. Link to website: 

. Service or transmission details: 
. Country of processing: 


AUNE 


5. Subject matter of (sub-) processing: 


6. Nature of (sub-) processing: 
Collection 

Restriction 

Dissemination 

Retrieval 

Structuring 

Storage 












































7. Duration of (sub-) processing: 


8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 

Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 
APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 


















































Adaptation 

Recording 

Erasure 

Otherwise making available 
Consultation 

Use 






































Hetzner Online GmbH 
https://www.hetzner.com/ 
Hosting, Online-Services 


Germany 


Hosting of websites, applications 






























































Disclosure by transmission 


Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 
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1. Company name: 1&1 Telecommunication SE 

2. Link to website: https://www.1und1.de/ 

3. Service or transmission details: Hosting, Online-Services 

4. Country of processing: Germany 

5. Subject matter of (sub-) processing: Hosting of websites, applications 

6. Nature of (sub-) processing: 
Collection Adaptation Disclosure by transmission 
Restriction Recording Alteration 
Dissemination Erasure Organisation 
Retrieval Otherwise making available Destruction 
Structuring Consultation Alignment 
Storage Use Combination 











7. Duration of (sub-) processing: 






































Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 


8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 









































X Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 
APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 








. Company name: 
. Link to website: 
. Service or transmission details: 


Contabo GmbH 
https://contabo.com/ 
Hosting, Online-Services 





AUNE 


. Country of processing: 


5. Subject matter of (sub-) processing: 


6. Nature of (sub-) processing: 
Collection 

Restriction 

Dissemination 

Retrieval 

Structuring 

Storage 












































7. Duration of (sub-) processing: 












































Germany 


Adaptation 

Recording 

Erasure 

Otherwise making available 
Consultation 

Use 






























































Hosting of websites, applications 


Disclosure by transmission 
Alteration 

Organisation 

Destruction 

Alignment 

Combination 


Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 


8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 












































Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 
APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 
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. Company name: 

. Link to website: 

. Service or transmission details: 
. Country of processing: 


AUNE 


5. Subject matter of (sub-) processing: 


6. Nature of (sub-) processing: 
Collection 

Restriction 

Dissemination 

Retrieval 

Structuring 

Storage 












































7. Duration of (sub-) processing: 












































Adaptation 
Recording 
Erasure 


Otherwise making available 


Consultation 
Use 


Amazon Web Services, Inc. 
https://aws.amazon.com/ 
Hosting, Online-Services 
Germany, USA 


Hosting of websites, applications 





Disclosure by transmission 
Alteration 

Organisation 

Destruction 

Alignment 

Combination 












































Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 

















8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 









































X Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 
APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 








. Company name: 

. Link to website: 

. Service or transmission details: 
. Country of processing: 


AUNE 


5. Subject matter of (sub-) processing: 


6. Nature of (sub-) processing: 
Collection 

Restriction 

Dissemination 

Retrieval 

Structuring 

Storage 












































7. Duration of (sub-) processing: 












































Adaptation 
Recording 
Erasure 


Otherwise making available 


Consultation 
Use 


Microsoft Ireland Operations Limited 
https://azure.microsoft.com/ 
Hosting, Online-Services 

Germany, Netherlands, Ireland, USA 


Hosting of websites, applications 








Disclosure by transmission 
Alteration 

Organisation 

Destruction 

Alignment 

Combination 









































Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 

















8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 





























Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 




















APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 
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. Company name: 

. Link to website: 

. Service or transmission details: 
. Country of processing: 


AUNE 


5. Subject matter of (sub-) processing: 


6. Nature of (sub-) processing: 
Collection 

Restriction 

Dissemination 

Retrieval 

Structuring 

Storage 












































7. Duration of (sub-) processing: 












































Adaptation 
Recording 
Erasure 


Otherwise making available 


Consultation 
Use 


Google LLC 


cloud.google.com, workspace.google.com 


Hosting, Online-Services 
Ireland, USA 


Hosting of websites, applications 











Alteration 
Organisation 
Destruction 
Alignment 
Combination 





















































8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 









































X Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 
APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 


Disclosure by transmission 


Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 








. Company name: 

. Link to website: 

. Service or transmission details: 
. Country of processing: 


AUNE 


5. Subject matter of (sub-) processing: 


6. Nature of (sub-) processing: 
Collection 

Restriction 

Dissemination 

Retrieval 

Structuring 

Storage 












































7. Duration of (sub-) processing: 












































Adaptation 
Recording 
Erasure 


Otherwise making available 


Consultation 
Use 


Willing & Able Operations LLC 
https://willing-able.com/ 

SaaS Apps, Hosting 

Germany, Netherlands, Ireland 


Provision of applications 











Alteration 
Organisation 
Destruction 
Alignment 
Combination 





















































8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 





























Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 




















APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 


Disclosure by transmission 


Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 
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. Company name: 

. Link to website: 

. Service or transmission details: 
. Country of processing: 


AUNE 


5. Subject matter of (sub-) processing: 


6. Nature of (sub-) processing: 
Collection 

Restriction 

Dissemination 

Retrieval 

Structuring 

Storage 












































7. Duration of (sub-) processing: 












































Adaptation 
Recording 
Erasure 


Otherwise making available 


Consultation 
Use 


Willing & Able Georgia LLC 
https://willing-able.com/ 

SaaS Apps, Hosting 

Germany, Netherlands, Ireland 


Provision of applications 











Alteration 
Organisation 
Destruction 
Alignment 
Combination 





















































8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 












































Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 
APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 


Disclosure by transmission 


Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 








. Company name: 

. Link to website: 

. Service or transmission details: 
. Country of processing: 


AUNE 


5. Subject matter of (sub-) processing: 


6. Nature of (sub-) processing: 
Collection 

Restriction 

Dissemination 

Retrieval 

Structuring 

Storage 












































7. Duration of (sub-) processing: 












































Adaptation 
Recording 
Erasure 


Otherwise making available 


Consultation 
Use 


Willing & Able Licensing LLC 
https://willing-able.com/ 

SaaS Apps, Hosting 

Germany, Netherlands, Ireland 


Provision of applications 











Alteration 
Organisation 
Destruction 
Alignment 
Combination 





















































8. Concluded contract or appropriate safeguards according to Art. 44ff GDPR: 





























Processor contract according to Art. 28 GDPR with individual contractual terms. 
APPENDIX 1 - SCCs 2021/915 BETWEEN CONTROLLERS AND PROCESSORS 
APPENDIX 2 - SCCs 2021/914 MODULE ONE: Transfer Controller to Controller 
APPENDIX 3 - SCCs 2021/914 MODULE TWO: Transfer Controller to Processor 




















APPENDIX 4 - SCCs 2021/914 MODULE THREE: Transfer Processor to Processor 
APPENDIX 5 - SCCs 2021/914 MODULE FOUR: Transfer Processor to Controller 


Disclosure by transmission 


Short-term processing or intermediate storage. 
Long-term processing for the duration of the contract. 
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